Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier: T2xYwEMMW+g2tdxmLd0R4r58A7tnnGZzU3+1VcPqMQU=
Subject key identifier: BC:33:45:AE:D1:AA:56:F0:0C:8C:3D:A2:6F:32:E5:54:66:7B:00:B3
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer: /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial: 019E9B17BD348847C4742E71A53F1CEC8DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number: 0DFC
Signing time: Sat 06 Jun 2026 04:01:24 +0000
Manifest this update: Sat 06 Jun 2026 04:01:24 +0000
Manifest next update: Sun 07 Jun 2026 04:01:24 +0000
Files and hashes: 1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: 0Ri10rhK/UHSoQxi/J2NF7ocw/lvSWTk02o9RZtWm8o=)
2: 5IiWlb3vHBWlCp6tIVca2yVQHto.roa (hash: STYN3zexlvKSLuiZ3ZMU8hJ7HbklvtNxc22+hhIPD74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:17:bd:34:88:47:c4:74:2e:71:a5:3f:1c:ec:8d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Validity
Not Before: Jun 6 04:01:24 2026 GMT
Not After : Jun 7 04:01:24 2026 GMT
Subject: CN=bc3345aed1aa56f00c8c3da26f32e554667b00b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:31:ee:f5:8e:e8:ab:be:45:17:af:19:29:
bb:ae:c5:b2:a1:5e:6c:8b:13:2b:e5:ef:e9:b5:dc:
5f:c8:0f:d8:b5:01:b0:58:03:03:cd:fd:a6:02:ba:
42:37:1f:f6:fb:cb:dc:8d:63:84:fe:f8:64:64:4c:
09:e9:0a:b0:97:ed:05:21:74:04:03:e1:54:92:b2:
2a:20:e8:35:fb:5e:98:7a:c0:0d:32:30:61:a0:f2:
99:96:6f:1d:89:63:08:53:04:54:52:5f:77:ca:be:
05:04:1c:c4:d5:df:b3:27:e9:c8:30:74:e8:0d:2c:
98:52:74:a2:c2:d3:1a:d0:7d:c5:aa:f7:cf:1e:cf:
94:11:f7:a2:3f:8a:f0:28:74:db:dc:a3:03:69:51:
a8:a9:bc:03:43:29:4f:e5:fe:9f:d8:87:5f:4f:9e:
65:0b:d6:3b:6e:9a:28:c3:c4:67:9c:4c:dd:fa:2b:
64:94:aa:59:b7:b2:c4:95:25:66:83:77:72:cc:17:
70:04:a6:47:9a:15:d6:62:9d:fb:74:58:4a:38:fb:
8b:f7:19:04:46:d1:58:2d:bb:ee:4f:2b:24:8d:17:
60:2b:30:cf:c3:ae:97:99:a0:a3:9f:06:2c:2b:62:
a0:1a:fd:21:96:06:03:3d:de:3a:ed:4e:3a:4a:d2:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:33:45:AE:D1:AA:56:F0:0C:8C:3D:A2:6F:32:E5:54:66:7B:00:B3
X509v3 Authority Key Identifier:
keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6d:99:b5:e9:e9:e3:3c:b2:c0:f6:25:a5:68:5b:57:2d:59:
41:85:49:bf:85:84:37:7f:5e:b8:ef:09:4b:6d:f9:84:3d:88:
f3:42:eb:1a:b2:4e:4f:a1:b6:68:93:b7:f2:33:18:ac:16:83:
9f:a7:14:16:81:00:ae:a2:c5:f1:a3:5f:e1:c5:e1:26:c6:94:
0f:89:86:2d:34:f9:df:d6:b9:8d:55:6f:a2:76:55:61:32:4c:
46:f4:2c:d5:68:43:18:2f:9b:18:02:1f:99:fe:b0:dc:5b:9d:
99:e5:9f:5a:50:cb:7a:e4:24:c6:aa:ab:39:b1:36:bb:b4:1f:
a1:43:08:ae:ac:b1:7e:36:e2:7d:34:e9:b8:36:37:6f:3c:4f:
bf:24:f5:64:95:9d:63:26:ca:cb:02:84:5e:90:c4:f4:77:07:
71:10:00:34:bc:b7:a5:64:03:b3:a3:00:79:8b:3f:a8:30:be:
3f:6b:86:6c:e1:9e:6a:8d:c4:c4:8d:09:ec:0b:cf:7b:83:7a:
77:73:57:ff:c0:da:52:f6:73:55:75:40:6a:0f:74:28:68:3c:
a5:88:b0:06:8a:08:a8:9e:11:9d:0d:88:32:19:0b:13:19:85:
84:02:86:4b:9e:f3:93:d3:eb:b3:02:23:57:68:12:2b:01:4e:
bb:c8:6b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:02 2026 by rpki-client